Package Health/3slab/vdm-library-http-transport-bundle

3slab/vdm-library-http-transport-bundle

The repository includes tests, a usable README, a small dependency set, and no install-time scripts. The license file says MIT despite a proprietary manifest declaration, and the project has no security scanning or security policy.

Latest 3.1.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

License

The artifact contains an MIT license file and the repository also has a license file, so the release is licensed. However, the manifest declares proprietary while the detected license is MIT, creating an avoidable licensing ambiguity.

Release history

The latest release was published nearly five years ago, with no releases in the last 12 months. This is strong evidence of an aging project and lowers confidence in ongoing compatibility maintenance.

Repo commit activity

The repository recorded no commits and had no active maintainers during the last three months, consistent with the long release gap. The repository is not archived, but there is no recent activity to offset the maintenance concern.

Repo tooling

Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This matters more for a network-facing HTTP transport than it would for a purely internal utility.